./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1923275432 <...> Warning: Permanently added '10.128.0.34' (ECDSA) to the list of known hosts. execve("./syz-executor1923275432", ["./syz-executor1923275432"], 0x7ffc600c8970 /* 10 vars */) = 0 brk(NULL) = 0x555556c85000 brk(0x555556c85d00) = 0x555556c85d00 arch_prctl(ARCH_SET_FS, 0x555556c853c0) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1923275432", 4096) = 28 brk(0x555556ca6d00) = 0x555556ca6d00 brk(0x555556ca7000) = 0x555556ca7000 mprotect(0x7f9a46b10000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f9a46a61010, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f9a46a618a0}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f9a46a61010, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f9a46a618a0}, NULL, 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3608 attached , child_tidptr=0x555556c85690) = 3608 [pid 3608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3608] setpgid(0, 0) = 0 [pid 3608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "1000", 4) = 4 [pid 3608] close(3) = 0 [pid 3608] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY) = 3 [pid 3608] socketpair(AF_UNIX, SOCK_STREAM, 0, [4, 5]) = 0 [pid 3608] ioctl(3, NBD_SET_SOCK, 4) = 0 [pid 3608] openat(AT_FDCWD, "/dev/nbd0", O_RDONLY|O_TRUNC) = 6 [pid 3608] ioctl(6, NBD_SET_SIZE_BLOCKS, 7) = 0 syzkaller login: [ 42.645134][ T3608] nbd0: detected capacity change from 0 to 14 [pid 3608] ioctl(3, NBD_DO_IT [pid 3607] kill(-3608, SIGKILL) = 0 [pid 3607] kill(3608, SIGKILL) = 0 [pid 3608] <... ioctl resumed>) = ? [ 47.606265][ T3608] block nbd0: shutting down sockets [pid 3607] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3607] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 3607] getdents64(3, 0x555556c866e0 /* 2 entries */, 32768) = 48 [pid 3607] getdents64(3, 0x555556c866e0 /* 0 entries */, 32768) = 0 [pid 3607] close(3) = 0 [ 73.011135][ T9] block nbd0: Possible stuck request ffff88801ea70000: control (read@0,4096B). Runtime 30 seconds [ 76.212910][ T1144] cfg80211: failed to load regulatory.db [ 103.091109][ T9] block nbd0: Possible stuck request ffff88801ea70000: control (read@0,4096B). Runtime 60 seconds [ 104.816510][ T2974] udevd[2974]: worker [3610] /devices/virtual/block/nbd0 is taking a long time [ 133.171148][ T9] block nbd0: Possible stuck request ffff88801ea70000: control (read@0,4096B). Runtime 90 seconds [ 163.251557][ T9] block nbd0: Possible stuck request ffff88801ea70000: control (read@0,4096B). Runtime 120 seconds [ 193.331089][ T9] block nbd0: Possible stuck request ffff88801ea70000: control (read@0,4096B). Runtime 150 seconds [ 223.411125][ T9] block nbd0: Possible stuck request ffff88801ea70000: control (read@0,4096B). Runtime 180 seconds [ 225.351210][ T2974] udevd[2974]: worker [3610] /devices/virtual/block/nbd0 timeout; kill it [ 225.359896][ T2974] udevd[2974]: seq 7461 '/devices/virtual/block/nbd0' killed [ 253.491162][ T9] block nbd0: Possible stuck request ffff88801ea70000: control (read@0,4096B). Runtime 210 seconds [ 283.571133][ T9] block nbd0: Possible stuck request ffff88801ea70000: control (read@0,4096B). Runtime 240 seconds [ 286.131187][ T28] INFO: task syz-executor192:3608 blocked for more than 143 seconds. [ 286.139379][ T28] Not tainted 6.0.0-rc4-syzkaller-00137-g506357871c18 #0 [ 286.147047][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.155764][ T28] task:syz-executor192 state:D stack:25856 pid: 3608 ppid: 3607 flags:0x00004006 [ 286.165055][ T28] Call Trace: [ 286.168345][ T28] [ 286.171323][ T28] __schedule+0x957/0xe20 [ 286.175859][ T28] ? release_firmware_map_entry+0x184/0x184 [ 286.181800][ T28] ? __mutex_trylock_common+0x8e/0x2f0 [ 286.187343][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 286.192623][ T28] schedule+0xcb/0x190 [ 286.196699][ T28] schedule_preempt_disabled+0xf/0x20 [ 286.202099][ T28] __mutex_lock_common+0xecf/0x26c0 [ 286.207339][ T28] ? blkdev_put+0x100/0x730 [ 286.211924][ T28] ? mutex_lock_io_nested+0x60/0x60 [ 286.217136][ T28] ? __fsnotify_parent+0x4fd/0x710 [ 286.222335][ T28] ? blkdev_open+0x2e0/0x2e0 [ 286.226949][ T28] mutex_lock_nested+0x17/0x20 [ 286.231750][ T28] blkdev_put+0x100/0x730 [ 286.236086][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 286.242217][ T28] ? blkdev_open+0x2e0/0x2e0 [ 286.246812][ T28] blkdev_close+0x55/0x80 [ 286.251179][ T28] __fput+0x3b9/0x820 [ 286.255270][ T28] task_work_run+0x146/0x1c0 [ 286.259886][ T28] do_exit+0x55e/0x20a0 [ 286.264129][ T28] ? mm_update_next_owner+0x6d0/0x6d0 [ 286.269516][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7b0 [ 286.275561][ T28] ? print_irqtrace_events+0x220/0x220 [ 286.281055][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 286.286186][ T28] do_group_exit+0x23b/0x2f0 [ 286.290798][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.296034][ T28] ? lockdep_hardirqs_on+0x95/0x140 [ 286.301295][ T28] get_signal+0x172f/0x1780 [ 286.305840][ T28] ? ptrace_notify+0x340/0x340 [ 286.310592][ T28] ? do_raw_spin_unlock+0x134/0x8a0 [ 286.315935][ T28] arch_do_signal_or_restart+0x8d/0x750 [ 286.321572][ T28] ? _raw_spin_unlock_irq+0x2a/0x40 [ 286.326763][ T28] ? ptrace_notify+0x245/0x340 [ 286.331578][ T28] ? get_sigframe_size+0x10/0x10 [ 286.336629][ T28] ? vtime_user_exit+0x2b2/0x3e0 [ 286.341650][ T28] ? exit_to_user_mode_loop+0x42/0x160 [ 286.347165][ T28] exit_to_user_mode_loop+0x74/0x160 [ 286.352499][ T28] exit_to_user_mode_prepare+0xad/0x110 [ 286.358049][ T28] syscall_exit_to_user_mode+0x2e/0x60 [ 286.363539][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 286.369441][ T28] RIP: 0033:0x7f9a46aa3b39 [ 286.373886][ T28] RSP: 002b:00007fff1892e798 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.382331][ T28] RAX: fffffffffffffe00 RBX: 00007fff1892e7e8 RCX: 00007f9a46aa3b39 [ 286.390293][ T28] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 286.398311][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.406358][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9a46a62bc0 [ 286.414390][ T28] R13: 431bde82d7b634db R14: 00007fff1892e7e0 R15: 0000000000000000 [ 286.422438][ T28] [ 286.425480][ T28] [ 286.425480][ T28] Showing all locks held in the system: [ 286.434040][ T28] 1 lock held by rcu_tasks_kthre/12: [ 286.439356][ T28] #0: ffffffff8cd20a70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 286.449901][ T28] 1 lock held by rcu_tasks_trace/13: [ 286.455212][ T28] #0: ffffffff8cd21270 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x30/0xd00 [ 286.467459][ T28] 1 lock held by khungtaskd/28: [ 286.472334][ T28] #0: ffffffff8cd208a0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 286.481702][ T28] 2 locks held by getty/3285: [ 286.486375][ T28] #0: ffff88802753a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 286.496186][ T28] #1: ffffc90002d232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6e8/0x1e50 [ 286.506354][ T28] 1 lock held by syz-executor192/3608: [ 286.511836][ T28] #0: ffff88801e9e84c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x730 [ 286.521294][ T28] 1 lock held by udevd/3610: [ 286.525866][ T28] #0: ffff88801e9e84c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0xfd/0xa40 [ 286.535867][ T28] [ 286.538211][ T28] ============================================= [ 286.538211][ T28] [ 286.546664][ T28] NMI backtrace for cpu 0 [ 286.550987][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.0.0-rc4-syzkaller-00137-g506357871c18 #0 [ 286.560779][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 286.570824][ T28] Call Trace: [ 286.574096][ T28] [ 286.577029][ T28] dump_stack_lvl+0x1e3/0x2cb [ 286.581732][ T28] ? io_alloc_page_table+0x110/0x110 [ 286.587009][ T28] ? panic+0x76b/0x76b [ 286.591154][ T28] ? console_unlock+0x6bd/0x6f0 [ 286.596012][ T28] ? console_trylock_spinning+0x450/0x450 [ 286.601747][ T28] ? nmi_cpu_backtrace+0x248/0x4b0 [ 286.606921][ T28] nmi_cpu_backtrace+0x47c/0x4b0 [ 286.611868][ T28] ? vprintk_emit+0x109/0x1e0 [ 286.617935][ T28] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 286.624081][ T28] ? _printk+0xcf/0x10f [ 286.628230][ T28] ? panic+0x76b/0x76b [ 286.632292][ T28] ? __wake_up_klogd+0xcd/0x100 [ 286.637136][ T28] ? panic+0x76b/0x76b [ 286.641223][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 286.647330][ T28] nmi_trigger_cpumask_backtrace+0x169/0x280 [ 286.653323][ T28] watchdog+0xcd5/0xd20 [ 286.657510][ T28] kthread+0x266/0x300 [ 286.661572][ T28] ? hungtask_pm_notify+0x50/0x50 [ 286.666592][ T28] ? kthread_blkcg+0xd0/0xd0 [ 286.671176][ T28] ret_from_fork+0x1f/0x30 [ 286.675612][ T28] [ 286.678746][ T28] Sending NMI from CPU 0 to CPUs 1: [ 286.683998][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_enter+0x43d/0x7a0 [ 286.685011][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 286.700233][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.0.0-rc4-syzkaller-00137-g506357871c18 #0 [ 286.710020][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 286.720068][ T28] Call Trace: [ 286.723706][ T28] [ 286.726626][ T28] dump_stack_lvl+0x1e3/0x2cb [ 286.731309][ T28] ? io_alloc_page_table+0x110/0x110 [ 286.736588][ T28] ? panic+0x76b/0x76b [ 286.740660][ T28] ? vscnprintf+0x59/0x80 [ 286.744982][ T28] panic+0x316/0x76b [ 286.748887][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 286.754504][ T28] ? nmi_trigger_cpumask_backtrace+0x205/0x280 [ 286.760661][ T28] ? fb_is_primary_device+0xcc/0xcc [ 286.765845][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 286.771909][ T28] ? nmi_trigger_cpumask_backtrace+0x205/0x280 [ 286.778068][ T28] ? nmi_trigger_cpumask_backtrace+0x265/0x280 [ 286.784226][ T28] watchdog+0xd16/0xd20 [ 286.788414][ T28] kthread+0x266/0x300 [ 286.792484][ T28] ? hungtask_pm_notify+0x50/0x50 [ 286.797504][ T28] ? kthread_blkcg+0xd0/0xd0 [ 286.802092][ T28] ret_from_fork+0x1f/0x30 [ 286.806535][ T28] [ 286.809815][ T28] Kernel Offset: disabled [ 286.814144][ T28] Rebooting in 86400 seconds..